> TritonInfoSec News
Home / Oct 15, 2026 / Story
0
#10 BleepingComputer general October 13, 2026 at 21:33 UTC

Ghostscript flaw lets hackers hijack servers via PDF uploads

By Bill Toulas

AI Summary

A critical heap buffer overflow in Ghostscript, tracked as CVE-2026-39919, allows remote code execution through specially crafted PDF files uploaded to servers running the widely deployed interpreter and rendering engine. Attackers can exploit the flaw via any service that processes PDFs using Ghostscript, making it a broad attack surface across document management, print servers, and web applications. Administrators should patch Ghostscript immediately and audit PDF-handling pipelines.

Read full article → https://www.bleepingcomputer.com/news/security/gho…

Relevance score: 75.0/100

# More from October 15

  1. 1
    Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days BleepingComputer
  2. 2
    CISA warns admins to immediately fix Ivanti flaw exploited as zero-day BleepingComputer
  3. 3
    Global takedown hits network behind 1 billion phishing messages BleepingComputer
  4. 4
    FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested BleepingComputer
  5. 5
    Cisco patches new Secure Email Gateway zero-day exploited in attacks BleepingComputer
  6. 6
    Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days The Hacker News
  7. 7
    AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host The Hacker News
  8. 8
    U.K. Sanctions Cryptomus for RU Money Laundering Krebs on Security
  9. 9
    OpenAI engineer arrested for allegedly planting spy device in office BleepingComputer